-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz fe0a02e1ec7f2ceffd82fad0335671ab4ff679d34869430e3ef61960b9c9c000 debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz 710c239168f513c87ef786d8bda567ffeec1d4ecbf4e6b4670167334b57968f8c228a0cbff150f4c15260d5af7263e7e398497e350548cd5755307db56581f70 debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz.hash debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz.hash debian-11-turnkey-lighttpd-php-fastcgi_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTUACgkQHkh6RjHW /rZ0bA//RghdrgskULkJ5ZRU5z4gWRWB609m7sGNXUBOGWAf9PtX4KIDHWi8AQxA Z+2gY5E7pYCY4b3r8DJIcMVjJusGNvLWsidoAzYk61dvsO6TBBwR7HKAwxuwY+N7 TWl8X8lu/8k+lH0/tAvs77VczEbk8ksTkb+U6LCECa4qC+7RAKMe1bbMJknzL9mH vpD1RYpQKGh5zuDATLH3u+NHUfwS0PIBVTSxCC3yFaRlkyztf1qDBoSDM0MJBn7N THzkJ20OzzV+TgTAAq2B2RqHn+XXTA9C27Awq7e+phUIwh7S7taFdXZFeSZqrfxB J6oKmwhILHU8dgkLzCYtaD2W/MIsmpUypU4kZIcAHH9aztdzNM/2JdREd8opHXsi rBT6BtxJDmZiUnpZ21zpN7RkWPtMtleC9RtSHmVbnsZXjhdlKUzU/lROIdvmImBb qz+hl6gPOUs4vrpMe/V8o8SBXzg+VRDc2IENR/NphoIDNoG3aqrYT9UkpCV1rxl6 zP4tec/R5sTsIAEP0l41RuZHSSUaErUkOUVza1XB2aj9Idq4oaJr6cTfOnCQYDiP IXUiP8k1OfUIdEQGEHlGkPMw4bYUplSxuXV5j3cVjaS85W1Lm+k871XLaNdcf+BI eZny4mpJIScWBmd8fTYClAUD3Dyk8TMFqQs/KwN9+GLnTtY6aj4= =gj1O -----END PGP SIGNATURE-----